Privacy Policy

Oslo Børs play an important role in the Norwegian securities market, and it is crucial that we enjoy the confidence and trust from our customers and the outside world. Therefore, we are committed to safeguard your privacy.

Oslo Børs, by the President & CEO, is responsible for the processing of personal data by the organization. The privacy policy contains information that you are entitled to when information is collected from our website, as well as general information about how we treat personal data.

Use of the Oslo Børs website

It is voluntary for those who visit the web sites to provide personal information related to services, such as receiving newsletters. The treatment basis is the consent of the individual, unless otherwise specified.

Norse Digital (Norse), Oslo Market Solutions (OMS) and Verdipapirsentralen (VPS) are Oslo Børs’s data processors. Norse and OMS are our suppliers of website development and maintenance, while VPS is our service provider for oslobors.no.

Information collected in connection with site operation is stored on servers operated by the service provider. Only Oslo Børs, Norse, OMS and VPS have access to the information collected. Separate data-processing agreements between Oslo Børs and OMS, Oslo Børs and Norse, and Oslo Børs and VPS regulate what information the providers have access to and how data should be processed.

My PageMy Page is a gateway to various web services from Oslo Børs, and is used to subscribe to news alerts from Oslo Børs, administer fictive portfolios or subscribe to company announcements from listed companies. Upon registration, Oslo Børs asks you for your name and e-mail address. The purpose is to be able to fulfil our agreement with you to provide the services, and to provide the services in a timely manner and prevent abuse. The information is stored in a separate database, and the information will be used only to manage My Page. If you choose to terminate your account, the personal information about you will be deleted.

NewsletterIn addition to the newsletters on My Page, you can subscribe to a number of different newsletters across oslobors.no. You will receive an e-mail when we publish information that you subscribe for. For this purpose, you must register your e-mail address. The e-mail address is stored in a separate database, not shared with others, and will only be used to send you newsletters. The e-mail address will be deleted when you unsubscribe. To unsubscribe please click the link in the newsletter or send your request to webansvarlig@oslobors.no.

Web AnalyticsOslo Børs collect data about visitors to oslobors.no using Google Analytics. The purpose of this is to produce statistics to improve and develop the website. Examples of what we use the statistics for is for example how many people visit different pages, how long the visit lasts, which sites users are coming from and which browsers are used. The data is processed in anonymised and aggregated form. This means we cannot track the data we collect back to the individual user.

CookiesCookies are small text files that is placed on your computer when you download a webpage, used for statistics and to support you as a user. By using oslobors.no, you agree that cookies are stored – since most browsers are automatically set up to accept cookies. If you do not accept our use of cookies, you may withdraw your consent by changing your browser settings. Please note that this may mean that our website will not function properly. Oslobors.no use cookies from Google Analytics, YouTube and our publishing system, eZ Publish.

List of cookies used:

Name

Purpose

_ga:

Used by Google Analytics to distinguish unique users. Expires after two years.

_gid:

Used by Google Analytics to log which pages the user visits. Expires after 24 hours.

_gat:

Used by Google Analytics to throttle the request rate - limiting the collection of data when high traffic. Expires after one minute.

eZSESSID:

Used by eZ Publish to identify users on My Page between page views. Expires when the browser is closed.

is_logged_in=true:

Used by eZ Publish to identify if the user is logged in to My Page. Expires when the browser is closed.

is_logged_in_user_name:

Used by eZ Publish to store the name of the user who is logged in to My Page and display the name on the web page. Expires when the browser is closed.

CONSENT

Used by YouTube to store the consent for using third party content in frames. Expires when the browser is closed.

NID

Used by YouTube to remember your preferences. Expires after six months.

You can reserve yourself against using cookies from Google Analytics here.

SearchOslo Børs stores which key words users apply in the search field at oslobors.no. The purpose is to improve our website. The information is stored in a separate database, and only saved in aggregated form. Only the key words is saved and they cannot be linked to other information about the users, such as the IP address.

E-mail and telephone

At Oslo Børs we use e-mail and telephone as part of our daily work. Relevant information arising from telephone conversations and e-mail dialogues might be stored in Oslo Børs’ CRM system, case management system or document management system. Various types of personal data is stored in these systems. This is information such as name, telephone number, e-mail address, job title and other relevant information as stated in the inquiry. The retention period for this information varies, depending on the type of inquiry. In addition, e-mail you send us is stored in a separate backup-archive, with restricted internal access, for five years.

Oslo Børs’s employees use e-mail in general dialogue with internal and external contacts. The individual shall delete messages that is no longer relevant. Messages stored in employee mailboxes, which is not manually deleted, will automatically be deleted after five years, and in special cases ten years. Upon resignation, e-mail accounts are deleted.

Information you send by e-mail may be sent unencrypted. We therefore urge you not to send confidential or sensitive information via open e-mail without sufficient security measures, such as transport encryption, password protected files, etc.

Information regarding telephone calls (telephone number and time of the call) to Oslo Børs’ main telephone number are logged in our telephone exchange. This log is required for the administration and operation of the switchboard. The information in the telephone call log is deleted after two weeks.

Oslo Børs undertake voice recording of operative telephone calls by, or to, Oslo Børs Market Surveillance and Oslo Børs Derivatives. Internal access to such recordings is limited to employees authorized to process the recordings by their duties and functions, and only to the extent strictly necessary to fulfil their duties. In addition, Oslo Børs has issued separate internal routines and guidelines for these telephone calls. The voice recordings is automatically deleted after five years.

List of seminar and course participants

When you register for a seminar or course provided by Oslo Børs, personal information are retained for the purpose of seminar and course management. Oslo Børs uses Pindena's sign-up solution, where you can register for seminars and courses by providing your name, contact information and employer.

Oslo Børs is responsible for the processing of personal information for the administration and registration of participants at Oslo Børs’ seminars and courses. Pindena deletes the personal data one month after the seminar or course is held. Oslo Børs stores the information about seminar and course participants for one and five years respectively. The processing of personal data in connection with this service is to fulfil an agreement with the participant.

Members of Oslo Børs and other contractual agreements

Oslo Børs process personal information for the purpose of onboarding clients and carry out background checks. For instance if your firm applies for membership on Oslo Børs to trade on marketplaces owned and managed by Oslo Børs. Additionally, personal information is processed to administer and carry out obligations in relation to any agreement you may have with us.

When entering into a contract or agreement with us, you may be asked to submit personal information about yourself in order to receive or use our services or products. This information include, but is not limited to, your name, address, telephone number, job title and e-mail address. The personal information is collected only to the extent it is necessary to provide you with the requested product or service. Oslo Børs will keep the information as long as the contract or agreement is valid. Upon termination of the contract or agreement, the information is stored for 10 years.

Listing on one of Oslo Børs’ marketplaces

Oslo Børs is dependent on providing consistent, documentable and verifiable case processing in connection with applications for listing of financial instruments on one of Oslo Børs’ marketplaces. In this regard, Oslo Børs retain personal information to fulfil its statutory duty, such as under the Securities Trading Act and the Securities Trading Regulation.

For instance, when a company applies for listing on one of the marketplaces owned by Oslo Børs, we will collect personal information about the management and the board of directors from the initial statement and the listing application. This information include, but is not limited to, name, address, telephone number, job title and e-mail address. In addition, Oslo Børs may collect information relating to criminal convictions and offences in accordance with the listing rules for the relevant marketplace. The data are subject to disclosure to the Norwegian FSA upon request.

Special security measures and procedures have been established for the archive of highly protective information, such as information relating to criminal convictions and offences.

Oslo Børs will, in the interests of verification and documentability, and the need for consistent practice in relation to the assessments made in the listing process, not delete information received in the matter's case.

List of primary insiders

Companies listed on one of Oslo Børs’ marketplaces have an obligation to provide Oslo Børs with a list of the company’s primary insiders in accordance with section 3-6 (3) and (4) of the Securities Trading Act. This includes the name, e-mail address, type of office or position held with the company, and national ID numbers of the relevant individuals. This information is stored up to five years after the individual ended the position as primary insider in the listed company.

The primary insider’s name, as well as the type of office or position held with the company are made public on Oslo Børs’ web page in accordance with section 3-6 (5) of the Securities Trading Act.

Market Surveillance

Oslo Børs shall, pursuant to section 12-5 of the Securities Trading Act, carry out surveillance of its members and issuers to ensure compliance with relevant market abuse legislation and regulations. In this regard, Oslo Børs may collect and process personal data related to transactions in financial instruments from issuers, members, central securities depositories and public authorities. If Oslo Børs suspects breach of legislation and regulations, such data may be subject to submission to Finanstilsynet (the Financial Supervisory Authority of Norway) in accordance with second paragraph of section 12-5 of the Securities Trading Act.

Documentation of investigations carried out by the Market Surveillance department pursuant to section 12-5 of the Securities Trading Act are stored for the required legal retention period of ten years. This information is exempted from the right to access pursuant to section 16 letter (b) of the Personal Data Act.

NewsPoint

NewsPoint is Oslo Børs’ electronic portal where issuers registers company specific information. Oslo Børs’ processing of personal data in connection with this portal is to fulfil an agreement with the issuer.

In order to administer and manage access to the portal, Oslo Børs process name, telephone number and e-mail address of the users of NewsPoint. This information is retained for two years after the termination of the user account. Additionally, information the issuer registers pursuant to the Continuing obligations of stock exchange listed companies are stored in the portal. Such information is deleted two years after deregistration.

In order to enhance security, NewsPoint uses two-factor authentication. In this regard, TeleSign process telephone numbers on behalf of Oslo Børs in order to administer and manage the authentication process. Separate data-processing agreements between Oslo Børs and TeleSign regulates how data should be processed.

OB Record Keeping Gateway

Oslo Børs is required to process information regarding details of orders submitted through our trading systems in accordance with MiFIR article 25 (2). This information includes national IDs of clients and investment decision- and execution makers submitted by members of Oslo Børs. The information is stored encrypted in OB Record Keeping Gateway with restricted internal access. The required legal retention period of five years is the basis for deletion. The data are subject to disclosure to the Norwegian FSA upon request.

Matador for Fixed Income (MFI)

Matador for Fixed Income (MFI) is Oslo Børs’ front-office terminal for trading bonds. Oslo Market Solutions (OMS) is the solution-and hosting-provider for MFI and acts as the data processor for the system.

In order to administer and maintain the system, Oslo Børs and OMS process personal information such as name, e-mail address, username and telephone number of its users. Additionally, Oslo Børs and OMS keep records of orders and trades registered in the system. The purpose of processing personal data in connection with this system is to fulfil an agreement with the user.

Oslo Børs and OMS store user information as long as the user has an active user profile. Records of orders and trades are stored for 10 years.

EDGE

EDGE is a trading- and registration platform which is used for trading in Tailor Made derivatives on the Oslo Connect market, and for reporting OTC derivatives transactions.

In order to administer and maintain the platform, Oslo Børs process personal information such as name, e-mail address and telephone number of its users. Additionally, Oslo Børs keep records of orders and trades registered on the platform. The purpose of processing of personal data in connection with this platform is to fulfil an agreement with the user.

Oslo Børs will keep the personal information for as long as the user has an active user profile.

SMS services

Oslo Børs offers real-time quotes and a number of different notifications by SMS for stocks, indices and funds. In order for us to send you SMS, you must provide us with your telephone number and provide a freely given, specific, informed and unambiguous consent to the processing of this personal information. Link Mobility is the data processor for the SMS services and shall only use the information for the purpose of these services. The data is retained for five years after the termination of the service, after which the information is anonymised.

Social media

Oslo Børs use Facebook, LinkedIn and Twitter to publish news and other relevant information. Oslo Børs have access to aggregated information about people visiting the pages, which is used for statistics, as well as to improve the posts we publish. For more information on how these companies process personal data, see the privacy policies of Facebook, LinkedIn and Twitter.

Recruitment

Oslo Børs is responsible for the processing of personal information for the administration and registration of job applicants. All job applications is recorded in Oslo Børs’ recruitment system, which is managed by the data processor, HR Manager AS. HR manager AS shall only use the information for the purpose of handling data in connection with administration of the recruitment system.

For Oslo Børs to process the personal data in this regard you will be asked to provide a freely given, specific, informed and unambiguous consent to this. The data is automatically deleted after a period of two years. We may desire to retain the personal data to consider candidates for future employment opportunities. In such case, we will seek your consent to retain the data for two additional years.

Security

Oslo Børs takes appropriate technical and organizational security measures in order to protect personal data against loss, misuse, alteration and destruction. These include arrangements to prevent unauthorized access to our systems as well as arrangements ensuring personal data is stored in physically secure accommodation. Access to personal data is limited to employees authorized to process the personal data by their duties and functions, and only to the extent strictly necessary to fulfil their duties.

For purposes relating to safety of individuals and security of Oslo Børs’ buildings and property, surveillance cameras monitor the premises of Oslo Børs. Recordings done by surveillance cameras will normally be stored for seven days.

Additionally, visitors of Oslo Børs must register their name, optionally their telephone number and company information, to gain access to the premises and to notify the person whom they are visiting. Visitor Systems AS manages this solution on behalf of Oslo Børs. This data will not be stored.

Access, correction and deletion

Data subjects have a right to access, correct and delete personal data processed by Oslo Børs related to the data subject in some cases. If you wish to access your personal data, or have your data corrected or deleted, please send your request via e-mail to privacy@oslobors.no with a description of the relevant processing activity, related personal data and the basis for your request.

The right to access, correct and delete personal data processed by Oslo Børs does not apply to data which is required to keep secret for the purpose of prevention, investigation, disclosure and prosecution of criminal offenses, or data which by law or in accordance with law is subject to confidentiality.

Where Oslo Børs process personal data, based on consent, data subjects can withdraw the consent at any time. To do so, please send your request via e-mail to privacy@oslobors.no with a description of the relevant processing activity, related personal data and the basis for your request.

Questions

Should you have any questions about this privacy policy, or any questions regarding how Oslo Børs processes personal data, please contact us via e-mail privacy@oslobors.no.